- NANOG - lists.nanog.org

Re: [Activity logging & archiving tool]
by guy 26 Nov '03

26 Nov '03

Don't forget that TACACS can log all commands entered into a router. When used in combination with rancid and cvs/cvs-web, it's very useful. > I'm looking for a simple tool, in which each and every one has to > manually record whatever (s)he has done or any incident (s)he observed > so that the tool archives that data someway. Later, in case if someone > needs, (s)he should be able to search for that archive by date, by > person, by a random phrase, etc. rancid (http://www.shrubbery.net/rancid) and cvs-web (http://stud.fh-heilbronn.de/~zeller/cgi/cvsweb.cgi/)

3 2

RE: [Activity logging & archiving tool]
by Brennan_Murphy＠NAI.com 26 Nov '03

26 Nov '03

Or Ciscoworks. A config change sends a syslog event to CW which in turn knows to go grab the latest copy of the config. I believe there are some reporting capabilities too, simple diff routines and archives of past configs. I think CW is more of the CVS-like approach whereas ACS is sort of a simple logging method. -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Dan Lockwood Sent: Tuesday, November 25, 2003 3:54 PM To: joshua sahala; Priyantha; nanog(a)nanog.org Subject: RE: [Activity logging & archiving tool] If you are in a Cisco shop you might consider Secure ACS. We use ACS to log all of our changes and have very good success with it. Unfortunately it is not free. Dan -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of joshua sahala Sent: Tuesday, November 25, 2003 11:45 AM To: Priyantha; nanog(a)nanog.org Subject: Re: [Activity logging & archiving tool] "Priyantha" <priyantha(a)wightman.ca> wrote: > > In my company, there are several technical guys make changes to the > existing network and it's very difficult to keep track of what we did > when, etc. i feel your pain - except when it was happening, they weren't as technical as they thought they were... > I'm looking for a simple tool, in which each and every one has to > manually record whatever (s)he has done or any incident (s)he observed > so that the tool archives that data someway. Later, in case if someone > needs, (s)he should be able to search for that archive by date, by > person, by a random phrase, etc. rancid (http://www.shrubbery.net/rancid) and cvs-web (http://stud.fh-heilbronn.de/~zeller/cgi/cvsweb.cgi/) rancid does nice proactive checking of device configs, and cvs-web is a pretty front end to look through change history for tracking: request tracker (http://www.bestpractical.com/rt/) - it is a ticketing system, but you could probably customize it to fit your needs netoffice (http://sourceforge.net/projects/netoffice/) - haven't used it personally, but it looks like it might work too track+ (http://sourceforge.net/projects/trackplus/) - same as netoffice of course, nothing will work unless everyone uses it, so you have to have clear, concise policies for change management, and then enforce them. hth /joshua > Any help in this regard is appreciated, > > Priyantha Pushpa Kumara > --------------------------------------- > Manager - Data Services > Wightman Internet Ltd. > Clifford, ON > N0G 1M0 > Fax: 519-327-8010 > > > "Walk with me through the Universe, And along the way see how all of us are Connected. Feast the eyes of your Soul, On the Love that abounds. In all places at once, seemingly endless, Like your own existence." - Stephen Hawking -

5 5

RE: [Activity logging & archiving tool]
by Dan Lockwood 26 Nov '03

26 Nov '03

If you are in a Cisco shop you might consider Secure ACS. We use ACS to log all of our changes and have very good success with it. Unfortunately it is not free. Dan -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of joshua sahala Sent: Tuesday, November 25, 2003 11:45 AM To: Priyantha; nanog(a)nanog.org Subject: Re: [Activity logging & archiving tool] "Priyantha" <priyantha(a)wightman.ca> wrote: > > In my company, there are several technical guys make changes to the > existing network and it's very difficult to keep track of what we did > when, etc. i feel your pain - except when it was happening, they weren't as technical as they thought they were... > I'm looking for a simple tool, in which each and every one has to > manually record whatever (s)he has done or any incident (s)he observed > so that the tool archives that data someway. Later, in case if someone > needs, (s)he should be able to search for that archive by date, by > person, by a random phrase, etc. rancid (http://www.shrubbery.net/rancid) and cvs-web (http://stud.fh-heilbronn.de/~zeller/cgi/cvsweb.cgi/) rancid does nice proactive checking of device configs, and cvs-web is a pretty front end to look through change history for tracking: request tracker (http://www.bestpractical.com/rt/) - it is a ticketing system, but you could probably customize it to fit your needs netoffice (http://sourceforge.net/projects/netoffice/) - haven't used it personally, but it looks like it might work too track+ (http://sourceforge.net/projects/trackplus/) - same as netoffice of course, nothing will work unless everyone uses it, so you have to have clear, concise policies for change management, and then enforce them. hth /joshua > Any help in this regard is appreciated, > > Priyantha Pushpa Kumara > --------------------------------------- > Manager - Data Services > Wightman Internet Ltd. > Clifford, ON > N0G 1M0 > Fax: 519-327-8010 > > > "Walk with me through the Universe, And along the way see how all of us are Connected. Feast the eyes of your Soul, On the Love that abounds. In all places at once, seemingly endless, Like your own existence." - Stephen Hawking -

2 1

Issues with Comcast broadband customers in the Seattle, WA area -- please contact
by dani-nanog＠roisman.com 26 Nov '03

26 Nov '03

Hello, Looking for someone @ Comcast (AS22909?) that can help troubleshoot a problem: For a few days, Comcast residential cablemodem customers in the Seattle, WA area are reporting that they cannot reach our application (TCP port 7000/7050/7070). IP's that the customers are coming from: 12.228.98.x 12.208.137.x 67.168.75.x 12.228.151.x 12.228.185.x (and a few more) The issue is not simply connectivity -- they ping in and hit http services on our network, just not get to TCP ports 7000, 7050, 7070. There is no apparant issue on our side, we accept hundreds of thousands of connections to this application each day. Please contact me if you are able to assist in troubleshooting. Thank you - Dani

1 0

RE: [Activity logging & archiving tool]
by McBurnett, Jim 26 Nov '03

26 Nov '03

If you are really just looking for changes and change comparison's check out Kiwi Cat tools.. www.kiwisyslog.com This software can connect via SSH, Telnet etc, and even do non-Cisco, Linux etc.. Works good as a backup for configs... Later, Jim CiscoWorks also polls the devices for configuration changes and generates a diff if you so desire. If you have set up AAA you will have an audit log of when changes were applied and who applied them. Scott C. McGrath

1 0

Opentransit (France Telecom) in Seattle
by Eric Kuhnke 26 Nov '03

26 Nov '03

Does anyone know what floor of the Westin building Opentransit's POP is on?

1 0

MPLS billing model
by Dan Lockwood 25 Nov '03

25 Nov '03

For those of you who sell MPLS VPNs, what components of the service do you charge for and how do you do the billing? E.g. per port + traffic, per site + traffic, etc. I am not interested in buying MPLS services just how the billing happens. Thanks! Dan

3 2

Re: [RE: [Activity logging & archiving tool]]
by joshua sahala 25 Nov '03

25 Nov '03

<Brennan_Murphy(a)NAI.com> wrote: > > Or Ciscoworks. A config change sends a syslog event to CW which in > turn knows to go grab the latest copy of the config. I believe > there are some reporting capabilities too, simple diff routines and > archives of past configs. or if you cannot afford cisco works (or would rather spend the money on other things...), you can do something similar with swatch. just look for the syslog string: %SYS-5-CONFIG_I: Configured from console by $user then trigger a rancid run on that device /joshua [cut] "Walk with me through the Universe, And along the way see how all of us are Connected. Feast the eyes of your Soul, On the Love that abounds. In all places at once, seemingly endless, Like your own existence." - Stephen Hawking -

2 1

RE: [RE: MPLS billing model]
by Dan Lockwood 25 Nov '03

25 Nov '03

That is a good point, but I was thinking specifically in terms of traffic on the tunnel. Dan -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Alex Rubenstein Sent: Tuesday, November 25, 2003 12:00 PM To: joshua sahala Cc: St. Clair, James; 'Nanog List (E-mail) ' Subject: Re: [RE: MPLS billing model] > we are still in the testing phases, but i believe that we are planning to > use a port+traffic billing scheme, if/when we go live and start trying to > sell it do you mean: $port + $traffic_through_port or: $port + $traffic_over_vpn_tunnel I ask this, because, it's very possible that the customer facing port could be a VLAN trunk, and that there would be a hub-and-spoke config to multiple leaf ports; other variations exist, as well. -- Alex Rubenstein, AR97, K2AHR, alex(a)nac.net, latency, Al Reuben -- -- Net Access Corporation, 800-NET-ME-36, http://www.nac.net --

1 0

Re: [RE: MPLS billing model]
by joshua sahala 25 Nov '03

25 Nov '03

"St. Clair, James" <JStClair(a)vredenburg.com> wrote: > > I'd appreciate knowing this as well - thanks in advance > > Jim > -----Original Message----- > From: Dan Lockwood > To: Nanog List (E-mail) > Sent: 11/25/2003 2:04 PM > Subject: MPLS billing model > > > For those of you who sell MPLS VPNs, what components of the service do > you charge for and how do you do the billing? E.g. per port + traffic, > per site + traffic, etc. I am not interested in buying MPLS services > just how the billing happens. Thanks! > > Dan > we are still in the testing phases, but i believe that we are planning to use a port+traffic billing scheme, if/when we go live and start trying to sell it /joshua "Walk with me through the Universe, And along the way see how all of us are Connected. Feast the eyes of your Soul, On the Love that abounds. In all places at once, seemingly endless, Like your own existence." - Stephen Hawking -

2 1